Details
Description
In case of claim mapping in a federation scenario the org.apache.cxf.sts.claims.ClaimManager parses the onBehalfOf token to detected source claims. The method parseClaimsInAssertion for SAML 1 & 2 token contains a bug by only copying the first claim value.
This error becomes visible for example for role claims with multliple values.